[Samba] acl for samba hosts

[Sven]

Hi list,

i got an question about the right acls for my Samba+ldap can someone
have an look.

acl.conf

access to dn.base=""
 by * read

access to dn.base="cn=subSchema"
 by * read

access to attrs=userPassword,userPKCS12
 by self write
 by * auth

access to attrs=shadowLastChange
 by self write
 by * read

access to dn.subtree="ou=adressbuch,dc=test,dc=intern"
 by users write
 by * read

access to dn.subtree="ou=users,dc=test,dc=intern"
 by self write
 by dn="uid=admin,ou=users,dc=test,dc=intern"
 by * read

access to dn.subtree="ou=groups,dc=test,dc=intern"
 by * read

access to dn.sub="ou=hosts,dc=test,dc=intern"
 by * auth
 by self write

MFG

Sven